@integrity-labs/agt-cli 0.28.408 → 0.28.410

package/dist/{claude-pair-runtime-WWTKA7QC.js → claude-pair-runtime-XGPENQB7.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-WYGZTU4O.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-W5QSIM7F.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-WWTKA7QC.js.map
+//# sourceMappingURL=claude-pair-runtime-XGPENQB7.js.map

package/dist/lib/manager-worker.js

@@ -45,7 +45,7 @@ import {
   resolveEffectivePinRaw,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-DRWBCTED.js";
+} from "../chunk-QZEA7FWB.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -147,7 +147,7 @@ import {
   toOpencodeModel,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-G7M7OFCG.js";
+} from "../chunk-YLLK4G3B.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -1207,7 +1207,7 @@ function isManagedMcpServerKey(key) {
 function isRemoteMcpEntry(value) {
   if (!value || typeof value !== "object") return false;
   const e = value;
-  return e.type === "http" || e.type === "sse" || typeof e.url === "string" && e.command === void 0;
+  return e.type === "http" || e.type === "sse" || e.type === "remote" || typeof e.url === "string" && e.command === void 0;
 }
 function orphanedRemoteMcpKeys(mcpServers, expectedIntegrationKeys) {
   const orphans = [];
@@ -1588,6 +1588,10 @@ function decideMaintenanceWindowGate(opts) {
 function shouldConsumeForcedUpdate(outcome) {
   return outcome !== "failed";
 }
+var FORCED_UPDATE_DEFER_ESCALATE_AFTER = 20;
+function shouldRelaxForcedUpdateIdleGate(deferStreak) {
+  return deferStreak >= FORCED_UPDATE_DEFER_ESCALATE_AFTER;
+}
 function decideForcedUpdate(opts) {
   const { requestedAt, lastProcessedAt, hostBusy } = opts;
   if (!requestedAt) return "none";
@@ -8931,14 +8935,20 @@ function restartGateFor(codeName, reason) {
     now: /* @__PURE__ */ new Date()
   });
 }
-function isHostBusyForForcedUpdate() {
+function isHostBusyForForcedUpdate(opts) {
   const now = /* @__PURE__ */ new Date();
   for (const agent of state6.agents) {
     const decision = decideRestartGate({
       window: null,
       paneLogAgeSeconds: paneLogAgeSecondsFor(agent.codeName),
       transcriptAgeSeconds: transcriptAgeSecondsFor(agent.codeName),
-      inboundAgeSeconds: inboundAgeSecondsFor(agent.codeName),
+      // ENG-8079: past the defer-streak threshold, drop the inbound-quiet axis
+      // and gate on progress alone. Passing null means "no signal" for that axis
+      // (see decideRestartGate), so only transcript/pane progress governs — an
+      // agent mid-turn still defers, an agent that merely received a message in
+      // the last 5 minutes no longer does. On a 14-agent host the inbound axis
+      // is what made the gate un-satisfiable in practice.
+      inboundAgeSeconds: opts?.relaxed ? null : inboundAgeSecondsFor(agent.codeName),
       now,
       env: {}
     });
@@ -8946,6 +8956,66 @@ function isHostBusyForForcedUpdate() {
   }
   return false;
 }
+function runPendingForcedUpdate() {
+  const requestedUpdateAt = cachedUpdateRequestedAt;
+  const relaxed = shouldRelaxForcedUpdateIdleGate(forcedUpdateDeferStreak);
+  const forcedUpdate = decideForcedUpdate({
+    requestedAt: requestedUpdateAt,
+    lastProcessedAt: state6.lastUpdateRequestProcessedAt ?? null,
+    hostBusy: isHostBusyForForcedUpdate({ relaxed })
+  });
+  if (forcedUpdate !== "defer-idle") forcedUpdateDeferStreak = 0;
+  if (forcedUpdate === "none" || forcedUpdate === "already-handled") return false;
+  if (forcedUpdate === "defer-idle") {
+    forcedUpdateDeferStreak += 1;
+    if (forcedUpdateDeferStreak === 1 || forcedUpdateDeferStreak % 10 === 0) {
+      log(
+        `[self-update] "Update CLI now" requested at ${requestedUpdateAt} \u2014 deferring: an agent is mid-turn / recently active (consecutive defers: ${forcedUpdateDeferStreak}). Retrying next poll.`
+      );
+    }
+    if (forcedUpdateDeferStreak === FORCED_UPDATE_DEFER_ESCALATE_AFTER) {
+      log(
+        `[self-update] WARN "Update CLI now" has deferred ${forcedUpdateDeferStreak} consecutive polls waiting for an idle host. Relaxing the idle gate to the progress axis only (an agent actively producing tokens still defers; "received a message in the last 5 minutes" no longer does).`
+      );
+    }
+    return false;
+  }
+  if (selfUpdateInFlight) {
+    log(
+      `[self-update] "Update CLI now" requested at ${requestedUpdateAt} \u2014 deferring: a self-update is already in flight. Retrying next poll.`
+    );
+    return false;
+  }
+  log(
+    `[self-update] "Update CLI now" requested at ${requestedUpdateAt} \u2014 running window-bypassing self-update now (host idle${relaxed ? ", relaxed gate" : ""}).`
+  );
+  const prevProcessedAt = state6.lastUpdateRequestProcessedAt ?? null;
+  void checkAndUpdateCli({ force: true }).then((outcome) => {
+    if (!shouldConsumeForcedUpdate(outcome)) {
+      log(
+        `[self-update] "Update CLI now" did not complete (no install ran) \u2014 leaving the request pending; the next idle poll retries.`
+      );
+      return;
+    }
+    log(
+      outcome === "updated" ? `[self-update] "Update CLI now" completed \u2014 upgrade installed; manager restart scheduled.` : `[self-update] "Update CLI now" completed \u2014 host was already on the latest in-channel build; nothing to install.`
+    );
+    state6.lastUpdateRequestProcessedAt = requestedUpdateAt;
+    try {
+      atomicWriteFileSync(getStateFile(), JSON.stringify(state6, null, 2));
+    } catch (err) {
+      state6.lastUpdateRequestProcessedAt = prevProcessedAt;
+      log(
+        `[self-update] failed to persist update-request ack; retrying next poll: ${err.message}`
+      );
+    }
+  }).catch((err) => {
+    log(
+      `[self-update] forced check failed: ${err.message} \u2014 leaving the request pending for retry.`
+    );
+  });
+  return true;
+}
 var runningMcpHashes = /* @__PURE__ */ new Map();
 var anchorSessionLifecycle = new AnchorSessionLifecycle();
 var runningMcpServerKeys = /* @__PURE__ */ new Map();
@@ -9307,7 +9377,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.408" : "dev";
+var agtCliVersion = true ? "0.28.410" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -9776,6 +9846,8 @@ var selfUpdatePinInvalidLogged = false;
 var restartAfterUpgrade = false;
 var pendingUpgradeVersion = null;
 var selfUpdateInFlight = false;
+var cachedUpdateRequestedAt = null;
+var forcedUpdateDeferStreak = 0;
 async function checkAndUpdateCli(opts) {
   const force = opts?.force ?? false;
   if (selfUpdateInFlight) return "failed";
@@ -9954,27 +10026,41 @@ async function checkAndUpdateCliViaNpm(force = false) {
     );
     return await installAgtCliViaNpm(pinDecision.version, `pin=${pinDecision.version}`);
   }
-  let latest;
-  try {
-    const res = await fetch(
-      `https://registry.npmjs.org/@integrity-labs/agt-cli/${encodeURIComponent(channel)}`,
-      {
-        signal: AbortSignal.timeout(1e4),
-        headers: { Accept: "application/json" }
+  const REGISTRY_TIMEOUT_MS = 1e4;
+  const registryAttempts = force ? 2 : 1;
+  let latest = null;
+  let lastFetchErr = "";
+  for (let attempt = 1; attempt <= registryAttempts; attempt++) {
+    try {
+      const res = await fetch(
+        `https://registry.npmjs.org/@integrity-labs/agt-cli/${encodeURIComponent(channel)}`,
+        {
+          signal: AbortSignal.timeout(REGISTRY_TIMEOUT_MS),
+          headers: { Accept: "application/json" }
+        }
+      );
+      if (!res.ok) {
+        log(`[self-update] npm registry returned ${res.status} (channel=${channel})`);
+        return "failed";
+      }
+      const body = await res.json();
+      if (!body.version) {
+        log(`[self-update] npm registry response missing version field`);
+        return "failed";
+      }
+      latest = body.version;
+      break;
+    } catch (err) {
+      lastFetchErr = err.message;
+      if (attempt < registryAttempts) {
+        log(
+          `[self-update] npm registry fetch failed (attempt ${attempt}/${registryAttempts}): ${lastFetchErr} \u2014 retrying.`
+        );
       }
-    );
-    if (!res.ok) {
-      log(`[self-update] npm registry returned ${res.status} (channel=${channel})`);
-      return "failed";
-    }
-    const body = await res.json();
-    if (!body.version) {
-      log(`[self-update] npm registry response missing version field`);
-      return "failed";
     }
-    latest = body.version;
-  } catch (err) {
-    log(`[self-update] npm registry fetch failed: ${err.message}`);
+  }
+  if (latest === null) {
+    log(`[self-update] npm registry fetch failed: ${lastFetchErr}`);
     return "failed";
   }
   const urgentTarget = await fetchUrgentDistTagVersion();
@@ -10439,7 +10525,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-WYGZTU4O.js");
+      const { collectDiagnostics } = await import("../persistent-session-W5QSIM7F.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor)
@@ -10515,7 +10601,15 @@ async function pollCycle() {
   } catch (err) {
     log(`[restart-handler] processRestartFlags threw: ${err.message}`);
   }
-  checkAndUpdateCli().catch((err) => log(`[self-update] Check failed: ${err.message}`));
+  let forcedUpdateKicked = false;
+  try {
+    forcedUpdateKicked = runPendingForcedUpdate();
+  } catch (err) {
+    log(`[self-update] runPendingForcedUpdate threw: ${err.message}`);
+  }
+  if (!forcedUpdateKicked) {
+    checkAndUpdateCli().catch((err) => log(`[self-update] Check failed: ${err.message}`));
+  }
   maybeUpgradeClaudeCode().catch((err) => log(`[claude-code-upgrade] Check failed: ${err.message}`));
   try {
     registeredAgentsCache.clear();
@@ -10538,7 +10632,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-WYGZTU4O.js");
+      const { collectDiagnostics } = await import("../persistent-session-W5QSIM7F.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor) : void 0;
       let tailscaleHostname;
@@ -10625,49 +10719,7 @@ async function pollCycle() {
           cachedDesiredAgtCliVersion = hbResp.desired_agt_cli_version ?? null;
         }
       }
-      const requestedUpdateAt = hbResp?.update_requested_at ?? null;
-      const forcedUpdate = decideForcedUpdate({
-        requestedAt: requestedUpdateAt,
-        lastProcessedAt: state6.lastUpdateRequestProcessedAt ?? null,
-        hostBusy: isHostBusyForForcedUpdate()
-      });
-      if (forcedUpdate === "defer-idle") {
-        log(
-          `[self-update] "Update CLI now" requested at ${requestedUpdateAt} \u2014 deferring: an agent is mid-turn / recently active. Retrying next poll.`
-        );
-      } else if (forcedUpdate === "consume") {
-        if (selfUpdateInFlight) {
-          log(
-            `[self-update] "Update CLI now" requested at ${requestedUpdateAt} \u2014 deferring: a self-update is already in flight. Retrying next poll.`
-          );
-        } else {
-          log(
-            `[self-update] "Update CLI now" requested at ${requestedUpdateAt} \u2014 running window-bypassing self-update now (host idle).`
-          );
-          const prevProcessedAt = state6.lastUpdateRequestProcessedAt ?? null;
-          void checkAndUpdateCli({ force: true }).then((outcome) => {
-            if (!shouldConsumeForcedUpdate(outcome)) {
-              log(
-                `[self-update] "Update CLI now" did not complete (no install ran) \u2014 leaving the request pending; the next idle heartbeat retries.`
-              );
-              return;
-            }
-            state6.lastUpdateRequestProcessedAt = requestedUpdateAt;
-            try {
-              atomicWriteFileSync(getStateFile(), JSON.stringify(state6, null, 2));
-            } catch (err) {
-              state6.lastUpdateRequestProcessedAt = prevProcessedAt;
-              log(
-                `[self-update] failed to persist update-request ack; retrying next heartbeat: ${err.message}`
-              );
-            }
-          }).catch((err) => {
-            log(
-              `[self-update] forced check failed: ${err.message} \u2014 leaving the request pending for retry.`
-            );
-          });
-        }
-      }
+      cachedUpdateRequestedAt = hbResp?.update_requested_at ?? null;
       if (hbResp?.feature_flags) {
         hostFlagStore().applyHeartbeat(hbResp.feature_flags, hbResp.flags_schema_version);
       }
@@ -10693,7 +10745,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-Z6XRHNMB.js");
+      } = await import("../responsiveness-probe-B7XCQQN4.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -10725,7 +10777,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-Z6XRHNMB.js");
+        } = await import("../responsiveness-probe-B7XCQQN4.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-HYOOQV4A.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -12364,21 +12416,18 @@ async function processAgent(agent, agentStates) {
         else promptBindProbeAttempts.delete(agent.code_name);
       }
     }
-    if (frameworkAdapter.removeMcpServer && frameworkAdapter.getMcpPath) {
-      const mcpPath = frameworkAdapter.getMcpPath(agent.code_name);
-      if (mcpPath && existsSync11(mcpPath)) {
-        try {
-          const cfg = JSON.parse(readFileSync18(mcpPath, "utf-8"));
-          const expectedRemoteKeys = new Set(
-            integrations.map((i) => i.definition_id)
-          );
-          for (const key of orphanedRemoteMcpKeys(cfg.mcpServers ?? {}, expectedRemoteKeys)) {
-            frameworkAdapter.removeMcpServer(agent.code_name, key);
-            log(`[hot-reload] Removed orphaned remote MCP server '${key}' for '${agent.code_name}' (integration removed)`);
-          }
-        } catch (err) {
-          log(`[hot-reload] Failed to prune orphaned remote MCP servers for '${agent.code_name}': ${err.message}`);
+    if (frameworkAdapter.removeMcpServer && frameworkAdapter.readMcpServers) {
+      try {
+        const declaredServers = frameworkAdapter.readMcpServers(agent.code_name);
+        const expectedRemoteKeys = new Set(
+          integrations.map((i) => i.definition_id)
+        );
+        for (const key of orphanedRemoteMcpKeys(declaredServers, expectedRemoteKeys)) {
+          frameworkAdapter.removeMcpServer(agent.code_name, key);
+          log(`[hot-reload] Removed orphaned remote MCP server '${key}' for '${agent.code_name}' (integration removed)`);
         }
+      } catch (err) {
+        log(`[hot-reload] Failed to prune orphaned remote MCP servers for '${agent.code_name}': ${err.message}`);
       }
     }
     const currentIntIds = integrations.map((i) => i.definition_id);
@@ -12560,22 +12609,15 @@ async function processAgent(agent, agentStates) {
             const urlHash = createHash14("sha256").update(e.url).digest("hex").slice(0, 12);
             log(`[managed-toolkit] ${agent.code_name}: wrote '${e.name}' (serverId=${e.serverId}, url_hash=${urlHash})`);
           }
-          if (frameworkAdapter.removeMcpServer && frameworkAdapter.getMcpPath) {
-            const mcpPath = frameworkAdapter.getMcpPath(agent.code_name);
-            if (mcpPath) {
-              try {
-                const { readFileSync: readFileSync19 } = await import("fs");
-                const mcpConfig = JSON.parse(readFileSync19(mcpPath, "utf-8"));
-                if (mcpConfig.mcpServers) {
-                  for (const key of Object.keys(mcpConfig.mcpServers)) {
-                    if (isManagedMcpServerKey(key) && !expectedServerIds.has(key)) {
-                      frameworkAdapter.removeMcpServer(agent.code_name, key);
-                      log(`[managed-toolkit] Removed stale MCP server '${key}' for '${agent.code_name}'`);
-                    }
-                  }
+          if (frameworkAdapter.removeMcpServer && frameworkAdapter.readMcpServers) {
+            try {
+              for (const key of Object.keys(frameworkAdapter.readMcpServers(agent.code_name))) {
+                if (isManagedMcpServerKey(key) && !expectedServerIds.has(key)) {
+                  frameworkAdapter.removeMcpServer(agent.code_name, key);
+                  log(`[managed-toolkit] Removed stale MCP server '${key}' for '${agent.code_name}'`);
                 }
-              } catch {
               }
+            } catch {
             }
           }
           agentState.knownManagedMcpHashes.set(agent.agent_id, mcpHash);
@@ -14037,7 +14079,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-WYGZTU4O.js");
+        const { collectDiagnostics } = await import("../persistent-session-W5QSIM7F.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor)
@@ -14087,7 +14129,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-WYGZTU4O.js");
+      const { collectDiagnostics } = await import("../persistent-session-W5QSIM7F.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor)
@@ -14540,7 +14582,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-WWTKA7QC.js");
+  } = await import("../claude-pair-runtime-XGPENQB7.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));